Symptom Cannot set ACLs for Linux Clients using NFSv4 for some RHEL versions.
Symptom Cannot run the Linux setfacl command on Linux client
Symptom setfacl command on Linux client returns "Operation not supported"
Cause There is a flaw with setting ACLs in RHEL4 and a version of RHEL5 which do not allow ACLs to be set. A network trace will show no attempt to make a setattr call. This is documented further at: https://bugzilla.redhat.com/show_bug.cgi?id=231231
I would take a quick network trace and see if that setattr is getting onto the wire. Also try with a Solaris client if you can - its NFS is more stable (IMHO) than Linux's
i am making progress trying to setacl from a Sun box. I've got domain name configured identically on Sun and Celerra ..yet when i try to "setfacl" i get "Permissions denied" and Celerra logs shows "NFS: 3: setacl cannot convert SID for owner bob@contoso.com".I think i am at the point where i have to get authentication working. My current setup uses usermapper with Active directory, but we also have LDAP in the environment. Can i use LDAP just for NFS4 authentication ? We do not have NIS and i dont' think password/group file will work for a big environment.
I know this thread is old but maybe this will be useful to someone - you need to use the nfs4_setfacl command, not the setfacl command which is for the Sun-style ACLs. The package name in redhat 5 is nfs4-acl-tools. I don't believe nfs4 acls are supported in redhat 4.
dynamox
9 Legend
•
20.4K Posts
0
June 29th, 2009 05:00
i've seen that bug, it's for RH5.0 ..i am at 5.3
Rainer_EMC
4 Operator
•
8.6K Posts
0
June 29th, 2009 05:00
ID: emc173549
Fact Product: Celerra
Fact Protocol: Network File System (NFSv4)
Fact OS: Red Hat Enterprise Linux (RHEL)
Symptom Cannot set ACLs for Linux Clients using NFSv4 for some RHEL versions.
Symptom Cannot run the Linux setfacl command on Linux client
Symptom setfacl command on Linux client returns "Operation not supported"
Cause There is a flaw with setting ACLs in RHEL4 and a version of RHEL5 which do not
allow ACLs to be set. A network trace will show no attempt to make a setattr call.
This is documented further at: https://bugzilla.redhat.com/show_bug.cgi?id=231231
Fix Upgrade to a later version of RHEL.
Rainer_EMC
4 Operator
•
8.6K Posts
0
June 29th, 2009 06:00
maybe a regression
I would take a quick network trace and see if that setattr is getting onto the wire.
Also try with a Solaris client if you can - its NFS is more stable (IMHO) than Linux's
Rainer
dynamox
9 Legend
•
20.4K Posts
0
June 29th, 2009 07:00
Thanks a lot
jeff_g1
1 Message
0
September 7th, 2010 19:00
I know this thread is old but maybe this will be useful to someone - you need to use the nfs4_setfacl command, not the setfacl command which is for the Sun-style ACLs. The package name in redhat 5 is nfs4-acl-tools. I don't believe nfs4 acls are supported in redhat 4.